VP, Enterprise Risk Management

Position Summary

The Vice President, Enterprise Risk Management is a critical member of the Enterprise Risk Management team and is responsible for driving enterprise-wide risk management practices, standards, and reporting. The candidate will also own and maintain the Company’s risk appetite statements and associated frameworks as well as lead the Key Risk Indicator, Control Testing, and Issues management programs. The role involves strategic leadership and direct reporting oversight to four risk professionals.

Essential Functions And Responsibilities

• Design, develop, implement, and execute the Company’s risk management frameworks to effectively identify, measure, monitor, and control enterprise-wide risks.
• Drive the evolution of the strategic risk framework, including consistency in measurement and methodology across risk management tools.
• Evolve the Company’s risk appetite statements and associated framework.
• Lead the execution of the issues management framework, including issue identification, classification, root cause analysis, action plan governance, escalation criteria, aging oversight, and reporting to senior management and committees.
• Partner with stakeholders on the design and build of enhanced workflows across RCSA, issues, and reporting as part of Global Risk and Compliance (GRC) uplift efforts.
• Define enterprise standards for risk assessments and drive their execution across the enterprise, such as for the RCSA, Vendor, and targeted risk assessments for Product, Operations and Technology.
• Drive the management and reporting of Key Risk Indicators.
• Governance over activities supporting control-testing process, assessment of First Line test results, proposal of control enhancements, and analysis of controls effectiveness and alignment across different frameworks.
• Effective management and production of enterprise risk reporting for risk governance committees and enterprise leadership.
• Ensure the organization's risk profile as related to its activities and dependencies are aligned with Company business strategy and risk appetite.
• Monitor and analyze risks within the Company's business units and report on these risks to the internal and external risk committees of the Company, supervisors, and other applicable internal stakeholders.
• Provide thought leadership and constructive challenge to the first line of defense for risk-related matters and relay complex and/or nuanced topics at the appropriate level for the audience, including technical and non-technical audiences, internally and externally.
• Build, maintain, and enhance business relations with key stakeholders, department, and business heads for the smooth implementation of risk management activities across the organization.
• Ensure the firm’s Risk Culture is positively impacted through effective risk training and risk tools.
• Manage and develop junior team members.
• Support the Head of Enterprise Risk Management in implementing Risk Office goals for the Company.
• Work successfully in a collaborative and team-oriented environment which encourages diversity of thought and open debate of ideas, must possess sound judgment and have the ability to function in a respectful manner.
• Identify, understand, challenge, and assess firmwide enterprise risk associated with assigned respective Business Units.
• Follow up and champion timely remediation of issues, incidents and remediation plans that require actions for assigned to respective Business Units.

Qualifications

• Bachelor’s degree or higher in risk management, business administration, computer science, engineering, finance, or a related area.
• At least 10-12 years of risk management experience serving as a subject matter expert in Enterprise or Operational Risk Management, preferably in the financial services industry.
• 10-12 years of financial services work experience designing, implementing, and/or managing enterprise-strategic risk frameworks.
• Extensive experience and expertise in defining enterprise standards for risk assessments and driving their execution.
• Understanding of the financial regulatory environment for the banking and payment systems industry.
• Experience designing, modifying, or implementing risk taxonomies, risk measurement methodologies, control testing, and/or key risk Indicator frameworks.
• Experience with control design and operating effectiveness testing.
• Experience working with a GRC platform (e.g., Archer, OpenPages, or proprietary).
• Excellent analytical, verbal, and written communication skills.

Qualifications Desired

• Advanced degree such as a master’s in risk management, or an MBA in Finance, Business, or a related field.
• FRM, PRMIA or other Risk Management certifications.
• Experience in Payments and/or banking related fields, including Payments or Banking Technology.
• Experience with Agile software development methodologies and associated risk management practices.
• Knowledge of IT risk, security architecture design, network security, cloud/mobile security, data security and internal/external threat intelligence/analysis.